» pamelasetup_basic.exe
Overview
Analysis
File Details
Programs (1)
Downloads (1)

pamelasetup_basic.exe

Pamela

Scendix Software-Vertriebsgesellschaft mbH

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. This file is installed with the program Pamela Basic 4.8. The file has been seen being downloaded from download.pamela.biz.

File name:

Publisher:

Scendix Software-Vertriebsges. mbH (signed by Scendix Software-Vertriebsgesellschaft mbH)

Product:

Pamela

Description:

Pamela Setup Program

Version:

4.8.0.115

MD5:

29907ccb537b3d72e6270a675a0601f0

SHA-1:

76b2ad51f575edb912956606d898729b75d5991d

SHA-256:

45e3c78932e891b6e8fdcccbffeef58c11cd802d09230ab2aba16c764a89a536

Scanner detections:

1 / 68

Status:

Clean (1 probable false positive detection)

Explanation:

This is mosty likely a false positive detection, the file is probably clean.

Analysis date:

12/25/2024 12:45:19 PM UTC (today)

Scan engine

Detection

Engine version

Trend Micro House Call

TROJ_GEN.F47V0715

7.2.355

File size:

6.3 MB (6,559,552 bytes)

Product version:

4.8.0.115

Trademarks:

File type:

Executable application (Win32 EXE)

Installer:

NSIS (Nullsoft Scriptable Install System)

Language:

English (United States)

Common path:

C:\users\{user}\downloads\pamelasetup_basic.exe

Digital Signature

Signed by:

Scendix Software-Vertriebsgesellschaft mbH

Authority:

COMODO CA Limited

Valid from:

7/13/2011 2:00:00 AM

Valid to:

7/13/2014 1:59:59 AM

Subject:

CN=Scendix Software-Vertriebsgesellschaft mbH, O=Scendix Software-Vertriebsgesellschaft mbH, STREET=Am Hornsgehege 6-8, L=Ebstorf, S=Germany, PostalCode=29574, C=DE

Issuer:

CN=COMODO Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

00C7D87A8AAF66EB34C3952C5F4EF6CD8E

File PE Metadata

Compilation timestamp:

12/5/2009 11:50:41 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

6.0

CTPH (ssdeep):

98304:OmUUz1Bum5ihIPv7kg9AUL2Wv/GffGQ0Brw+oDjoegYo7MGChP+jB0:ZU0B9LHB9AUL9HGmdr9egz76+je

Entry address:

0x30CB

Entry point:

81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 60, 91, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, B0, 70, 40, 00, 53, FF, 15, 7C, 72, 40, 00, 6A, 08, A3, 38, 3F, 42, 00, E8, F1, 2B, 00, 00, A3, 84, 3E, 42, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, 30, F4, 41, 00, FF, 15, 58, 71, 40, 00, 68, 54, 91, 40, 00, 68, 80, 36, 42, 00, E8, A4, 28, 00, 00, FF, 15, AC, 70, 40, 00, BF, 00, 90, 42, 00, 50, 57, E8, 92, 28, 00, 00... 
[+]

Packer / compiler:

Nullsoft install system v2.x

Code size:

22.5 KB (23,040 bytes)

The file pamelasetup_basic.exe has been discovered within the following program.

Pamela Basic 4.8 by Scendix Software GmbH

About 3% of users remove it

The file pamelasetup_basic.exe has been seen being distributed by the following URL.

http://download.pamela.biz/PamelaSetup_Basic.exe

Scan pamelasetup_basic.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.